cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
95011 commits 1 branch 0 tags 3.7 GiB
Commit graph

3122 commits

Author SHA1 Message Date
Franz Pletz
a3ec0f1593
nixos/nginx: reload on acme cert renewal 2016-10-09 12:55:24 +02:00
Franz Pletz
03c2b449f8
dhcpd service: Add extraFlags option 2016-10-09 11:38:34 +02:00
oida
725e04cc01
prometheus module: added default option values for relabel_config 2016-10-09 11:37:33 +02:00
Joachim Fasting
52d12b473a
mysql service: specify defaultText for package option 
Also provide an example that differs from the default.
 2016-10-09 11:28:51 +02:00
romildo
19779be536 lxqt: Add xscreensaver to systemPackages 2016-10-08 23:55:11 -03:00
Casey Ransom
74558c88fb smokeping module: fix missing js, broken alerts 
The initial commit accidentally left in some commented code and if you were
using alerts, they simply didn't work.

Smokeping also includes some JS code for the webui allowing you to zoom into
graphs and it was not passed into the homedir. Additionally, generate
static html pages for other webservers to serve the cache directory.

Add additional options to specify sendmail path or mailhost and verify that both
are not set.

Add one extra config hook that allows you to bypass all of the invidual config
stanzas and just hand it a string.
 2016-10-08 20:52:45 -04:00
Joachim F
ccd915ca27 Merge pull request #19358 from romildo/lxqt 
lximage-qt: init at 0.5.0
 2016-10-08 16:03:35 +02:00
romildo
22b86a8753 lximage-qt: init at 0.5.0 2016-10-08 10:37:10 -03:00
Jaka Hudoklin
afbe339e7d firewall service: add support for loose reverse path filter check (#19122) 2016-10-08 14:26:52 +02:00
Peter Hoeg
7e5a393e8c
deluge module: support specifying open file limit 
We also increase the limit to 4096.
 2016-10-07 22:14:03 +02:00
Jörg Thalheim
daf4e57577 Merge pull request #19209 from siddharthist/urxvtd/init 
urxvtd service: init
 2016-10-07 16:14:35 +02:00
Joachim F
030a298406 Merge pull request #19212 from romildo/new.lxqt 
lxqt: init at 0.11
 2016-10-07 14:00:54 +02:00
romildo
a5bbe8970f obconf-qt: init at 0.11.0 2016-10-07 06:57:25 -03:00
José Romildo Malaquias
0d7056331d compton-conf: init at 0.2.0 2016-10-06 19:01:04 -03:00
Langston Barrett
543494b815 urxvtd service: init 
adds pkgs.rxvt_unicode-with-plugins
adds appropriate environment.variables
no default target, must be enabled manually
 2016-10-06 20:03:06 +00:00
Thomas Tuegel
2e255a2edd
Merge branch 'staging' 2016-10-06 09:51:02 -05:00
Moritz Ulrich
c475234827 services.kippo: Add missing '}' 2016-10-06 13:39:21 +02:00
José Romildo Malaquias
fbe7c92bd5 lxqt: Add libkscreen to systemPackages 2016-10-06 08:02:44 -03:00
José Romildo Malaquias
0b4e3e7822 lxqt: Add qtsvg to systemPackages 2016-10-06 08:02:44 -03:00
José Romildo Malaquias
49ed3ab705 lxqt: fix small issues in nix expressions 2016-10-06 08:02:43 -03:00
José Romildo Malaquias
f3e8bfa823 lxqt service: init at 0.11 2016-10-06 08:02:43 -03:00
Frederik Rietdijk
6f836eb0d4 Kippo: move pythonPackages.twisted_11 to kippo expression 2016-10-06 12:59:05 +02:00
Domen Kožar
2fdda9ce04 Merge pull request #19281 from peterhoeg/php 
php-fpm: add reload support
 2016-10-06 11:49:03 +02:00
Eric Sagnes
0bd263ecc3
wireguard: add module 
fixes #17933
 2016-10-06 09:41:38 +02:00
Peter Hoeg
47a8f1ea85 php-fpm: add reload support 
Upstream recommends sending USR2 for a graceful reload.
 2016-10-06 10:22:24 +08:00
Nikolay Amiantov
2058c856a1 Merge pull request #19235 from aske/sddm-log 
sddm: fix missing X server logs
 2016-10-05 21:16:26 +04:00
Vladimír Čunát
30f551d8b2 Merge branch 'master' into staging 2016-10-05 19:02:48 +02:00
Peter Hoeg
5a6626f47c php fpm: add systemd support 
PHP FPM will now notify systemd when it's done initializing and ready to
serve requests.

Additionally ```systemctl status phpfpm``` will now show statistics such
as:

```
Status: "Processes active: 0, idle: 8, Requests: 0, slow: 0, Traffic: 0req/sec"
```
 2016-10-05 23:30:31 +08:00
Chris Martin
57023aba3d riemann-health service: add procps to path (#19237) 2016-10-05 10:52:15 -04:00
Gleb Peregud
5f0edde4b1 Fix typo in emacs.xml 2016-10-05 07:46:28 +02:00
Thomas Tuegel
d067b7bd35
Merge branch 'kde-5' into staging 2016-10-04 21:50:17 -05:00
Kirill Boltaev
1978d00458 sddm: wrap xserver in systemd-cat to make logs appear in the journal 2016-10-05 00:07:23 +03:00
Joachim F
94cf6b2d56 Merge pull request #19210 from joachifm/mysql 
Some light mysql service enhancements
 2016-10-04 22:30:53 +02:00
Andrew Scott
05b7aaae74 nix.optimise.dates should be list 2016-10-04 11:31:51 +01:00
Joachim Fasting
4358d3d439
mysql service: specify a default package 
A config ought to be buildable using just the defaults.
 2016-10-03 23:08:32 +02:00
Joachim Fasting
c2153538d9
mysql service: add some option types 
Note that this changes the type and default value of port to int
(previously default was a string, no type).
 2016-10-03 23:08:31 +02:00
Joachim Fasting
88265c8238
mysql service: order after network.target 2016-10-03 23:08:26 +02:00
Jörg Thalheim
888f6a1280 Merge pull request #19199 from wizeman/u/fix-help2man-hash 
help2man: fix hash
 2016-10-03 19:26:44 +02:00
Eelco Dolstra
69bb34673e Merge pull request #19196 from groxxda/xkbbindir 
xserver: replace XKB_BINDIR with compile time option
 2016-10-03 17:12:59 +02:00
Jörg Thalheim
a9cd913b73 Merge pull request #19176 from makefu/module-opentracker 
opentracker: init module
 2016-10-03 16:55:38 +02:00
Alexander Ried
e7ded267bd xserver: replace XKB_BINDIR with compile time option 
---

Using the configure option relieves us of the patch and passing the path
via the env var in many places. Also the env var may not be inherited
when components like gdm spawn new sessions.
 2016-10-03 15:03:02 +02:00
Tristan Helmich
81ff763541 emby: use makeWrapper to supply ffmpeg/probe paths 
Fixes NixOS/nixpkgs#19118
 2016-10-03 12:23:44 +02:00
makefu
e9039c8b5a
opentracker service: init 2016-10-03 11:29:33 +02:00
Charles Strahan
7df35fd268 Merge pull request #19143 from cstrahan/nixos-typematic 
nixos: xserver typematic configuration options
 2016-10-03 04:04:45 -04:00
Charles Strahan
f9a3835a14
nixos: xserver typematic configuration options 
This allows one to set the seat defaults for keyboard auto-repeat delay
and rate.
 2016-10-03 04:00:06 -04:00
Joachim F
0906a0f197 Merge pull request #18491 from groxxda/network-interfaces 
Replace Network-interfaces.target
 2016-10-02 16:34:37 +02:00
Jörg Thalheim
cd673d3c26 Merge pull request #19138 from nhooyr/openssh 
openssh: support prohibit-password for permitRootLogin
 2016-10-02 15:26:21 +02:00
Tuomas Tynkkynen
19225bf5cc Merge remote-tracking branch 'upstream/master' into staging 2016-10-02 10:36:47 +03:00
Anmol Sethi
6891bb1c59
openssh: support prohibit-password for permitRootLogin 
See 1dc8d93ce6

I also made it the default.
 2016-10-01 13:23:56 -04:00
Jörg Thalheim
7d3143990f Merge pull request #19136 from nhooyr/powerdns 
powerdns: removed PrivateTmp=true in serviceConfig
 2016-10-01 18:28:34 +02:00
Anmol Sethi
489ca7e5c0
powerdns: removed PrivateTmp=true in serviceConfig 
As discussed in #18718 PrivateTmp is unnecessary because powerdns is
chrooted to /var/lib/powerdns.

I also added myself as co-maintainer.
 2016-10-01 12:27:23 -04:00
Joachim F
7e80c42b0e Merge pull request #18511 from ericsagnes/feat/remove-optionSet 
modules: optionSet -> submodule
 2016-10-01 17:57:45 +02:00
Jaka Hudoklin
98a8146428 Merge pull request #19016 from offlinehacker/pkgs/flannel/update/0.6.2 
flannel: update, add nixos module, add tests
 2016-10-01 17:22:34 +02:00
Jaka Hudoklin
feb9fc3aff flannel service: init 2016-10-01 17:08:48 +02:00
Jörg Thalheim
f2f7420e2b Merge pull request #19115 from Ralith/matrix-synapse 
matrix-synapse: 0.17.1 -> 0.18.0
 2016-10-01 14:54:41 +02:00
Eelco Dolstra
e993506d4c samba: Use startup notification 
This ensures synchronous unit start.
 2016-09-30 21:22:58 +02:00
Robert Helgesson
db3579c332
ddclient service: minor spelling fix 2016-09-30 19:26:21 +02:00
Thomas Bereknyei
5bca9297ff
ddclient: add configFile option 
ddclient: improve documentation

Adopted @joachifm's suggestions.

ddclient additional refinement
 2016-09-30 19:13:56 +02:00
Joachim F
1ddc08a3ac Merge pull request #18452 from bendlas/init-postgrey 
postgrey: init at 1.36
 2016-09-30 15:31:44 +02:00
Shea Levy
b692e06686 supplicant: Make the device pull in the supplicant service. 
The udev rule should do this. Not sure why it doesn't.

Fixes #19029.
 2016-09-30 09:22:49 -04:00
Peter Hoeg
639e5401ff dbus: add socket activation but do not enable it 
The following changes are included:

1) install user unit files from upstream dbus
2) use absolute paths to config for --system and --session instances
3) make socket activation of user units configurable

There has been a number of PRs to address this, so this one does the
bare minimum, which is to make the functionality available and
configurable but defaults to off.

Related PRs:
 - #18382
 - #18222

(cherry picked from commit f7215c9b5b47dfb0a6dbe87ff33d7730729a32e5)
Signed-off-by: Domen Kožar <domen@dev.si>
 2016-09-30 13:14:53 +02:00
Eelco Dolstra
020e88704a kde4: Get rid of some Nepomuk cruft by default 2016-09-29 20:03:54 +02:00
Eelco Dolstra
c2495261a8 kde4: Allow disabling dependency on MariaDB 
This reduces the runtime closure of a KDE4 system by ~172 MiB.
 2016-09-29 20:03:50 +02:00
Joachim F
e2c7f7135d Merge pull request #19060 from bachp/confd-etcd-port 
confd service: change default etcd port 4001 -> 2379
 2016-09-29 14:59:51 +02:00
Joachim F
4d3282a8fe Merge pull request #18993 from ericsagnes/mod/php-fpm 
php-fpm module: cleanup
 2016-09-29 13:14:32 +02:00
Eelco Dolstra
518340624d Merge remote-tracking branch 'origin/master' into staging 2016-09-29 13:06:14 +02:00
Eelco Dolstra
75a1ec8a65 NixOS: Use runCommand instead of mkDerivation in a few places 2016-09-29 13:05:28 +02:00
Pascal Bach
7d6c02d45a confd service: change default etcd port 4001 -> 2379 
New versions of etcd listen on 2379 by default.
This is also the official IANA assigned port.
 2016-09-28 23:35:54 +02:00
Vladimír Čunát
77604964b6 Merge branch 'master' into staging 2016-09-28 17:13:59 +02:00
Graham Christensen
e2688e072d
moodle: mark as broken 
https://github.com/NixOS/nixpkgs/issues/18856
 2016-09-28 08:52:18 -04:00
Graham Christensen
310b3d39f7 Merge pull request #18994 from grahamc/mediawiki 
mediawiki: 1.23.13 -> 1.27.1
 2016-09-27 16:33:31 -04:00
Franz Pletz
77779323c5
gitlab: 8.11.2 -> 8.12.1 2016-09-27 18:41:02 +02:00
Herwig Hochleitner
5fa7cf9f97 postgrey: add types to service 2016-09-27 15:35:02 +02:00
Herwig Hochleitner
5609fe521d postgrey: init at 1.36 (includes service) 2016-09-27 15:35:02 +02:00
Graham Christensen
8504237863
mediawiki: 1.23.13 -> 1.27.1 2016-09-26 21:53:36 -04:00
Eric Sagnes
b14ecbb96f php-fpm module: cleanup 
- Added example for the pool option
- Unified PHP-FPM spelling
 2016-09-27 10:20:22 +09:00
Graham Christensen
43c546ce91 Merge pull request #18989 from grahamc/wordpress 
wordpress: 4.3.1 -> 4.6.1 + add a test
 2016-09-26 19:36:34 -04:00
Graham Christensen
4671806183
wordpress: 4.3.1 -> 4.6.1 + add a test 2016-09-26 19:36:07 -04:00
Christoph Hrdinka
553a3295c1 nsd: 4.1.9 -> 4.1.12 
4.1.12
======

Bugfixes
--------

Fix malformed edns query assertion failure, reported by Michal Kepien (NASK).

4.1.11
======

Features
--------

* When tcp is more than half full, use short timeout for tcp session.
* Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori.
* Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173 JVN#63359718 JPCERT#91251865.

Bugfixes
--------

* Fix build without IPv6, patch from Zdenek Kaspar.
* Fix #783: Trying to run a root server without having configured it silently gives wrong answers.
* Fix #782: Serve DS record but parent zone has no NS record.
* Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.

4.1.10
======

Features
--------

* ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option for Linux, binds to interfaces and addresses that are down.
* NSD includes AAAA before A for queries over IPV6 (in delegations). And TC is set if no glue can be provided with a delegation because of packet size.
* print notice that nsd is starting before taking off.

Bugfixes
--------

* Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
* Fix #751: NSD fails to occlude names below a DNAME.
* If set without nsd.db print "" as the default in the man pages.
* Fix #755: NSD spins after a zone update and a lot of TCP queries.
* Fix for NSEC3 with zone signed without exact match for empty nonterminals, the answer for that domain gets closest encloser.
* #772 Document that recvmmsg has IPv6 problems on some linux kernels.

4.1.9
=====

Bugfixes
--------

* Change the nsd.db file version because of nanosecond precision fix.
 2016-09-27 00:14:24 +02:00
zimbatm
d4c66e2f46 Merge pull request #18694 from bachp/runner-master 
gitlab-runner: add package and service
 2016-09-26 22:45:39 +01:00
Frederik Rietdijk
4020035513 Merge pull request #18935 from rycee/pullout/radicale 
radicale: break into own package
 2016-09-26 22:14:42 +02:00
aszlig
2af7051197
nixos/offlineimap: Move to services/mail 
The services/networking directory is already quite polluted and the
first point where I was looking for the offlineimap module was in
services/mail and didn't find it there.

Offlineimap already has IMAP in its name and clearly belongs to the
"mail" category so let's move it there.

Tested by evaluating a configuration with services.offlineimap enabled.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @DamienCassou
 2016-09-26 21:18:06 +02:00
aszlig
603b73f1e1
nixos/offlineimap: Don't build the package on eval 
Coercing the derivation to string causes the package to be built during
evaluation rather than during actual realization which is completely
unnecessary because we don't need additional Nix expression information
for the package (nor do we need it for the service).

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @DamienCassou
Cc: @Profpatsch (stumbled on this because of him)
 2016-09-26 21:07:06 +02:00
zimbatm
ff980cc553 Merge pull request #18961 from wlhlm/nginx-events 
Allow configuration of events{} block in nginx module
 2016-09-26 13:41:54 +01:00
Wilhelm Schuster
54c5154b90 nginx module: Add option to configure events block 2016-09-26 12:16:53 +02:00
Robert Helgesson
9d2a831497
radicale: break into own package 
Since this is an application it is not suitable for pythonPackages,
which is more appropriate for Python modules.
 2016-09-25 22:15:19 +02:00
Michele Guerini Rocco
ec8d5945ce connman: disable connman-vpn by default (#18323) 2016-09-25 08:02:29 +02:00
Arseniy Seroka
8b16e5fad8 Merge pull request #18833 from DamienCassou/rsnapshot-module-config 
rsnapshot: add default options to module config
 2016-09-25 01:07:49 +04:00
Vladimír Čunát
fffc7638cd Merge branch 'master' into staging 2016-09-24 18:54:31 +02:00
Joachim F
2522504bd1 Merge pull request #18463 from regnat/selfoss 
Selfoss : add package and module
 2016-09-24 16:10:39 +02:00
Pascal Bach
de38c1bca0 gitlab-runner service: initial version 2016-09-23 22:39:12 +02:00
Wei-Ming Yang
e330807e1f
murmur service: welcome -> welcometext 
fixed incorrect option name `welcome` to `welcometext`.

joachifm added a rename for backwards compat.

Closes https://github.com/NixOS/nixpkgs/pull/18570
 2016-09-23 16:08:14 +02:00
Matt McHenry
de9546307f
nix-optimise service: init 
Closes https://github.com/NixOS/nixpkgs/pull/18378
 2016-09-23 16:08:03 +02:00
Joachim F
7529fd3bff Merge pull request #18818 from Jookia/RFC_htpdate 
Rfc htpdate
 2016-09-23 15:19:49 +02:00
Charles Strahan
3fe8eca17b Merge pull request #18853 from kvz/patch-2 
Run riak with its `dataDir` as `HOME` so Erlang cookie can be written
 2016-09-22 20:51:25 -04:00
Kevin van Zonneveld
6d3b06ce37 Run riak with its dataDir as HOME so Erlang cookie can be written 
See https://github.com/NixOS/nixpkgs/issues/18852
 2016-09-22 22:49:30 +02:00
Jookia
e23cc550b3 nixos: add htpdate module 2016-09-23 02:02:20 +10:00
Damien Cassou
76923385bc
rsnapshot: add default options to module config 2016-09-22 15:04:46 +02:00
Kevin van Zonneveld
6ee89c907c Remove reference to riak2 
As mentioned by LnL in IRC, we

> used to have riak and riak2

But this seems no longer the case, hence the example should be updated.
 2016-09-21 14:34:31 +02:00
Domen Kožar
001d314e87 Merge pull request #18574 from ericsagnes/feat/mongodb 
MongoDB service: switch configuration format to YAML
 2016-09-21 14:19:17 +02:00
Benjamin Staffin
ab40702c96 Merge pull request #18770 from mayflower/prometheus-alertmanager 
Prometheus alertmanager module
 2016-09-20 19:54:40 -04:00
0ida
619ab48988 prometheus: add options for alertmanager 2016-09-20 19:35:03 +02:00
0ida
fdded2c554 prometheus alertmanager module: init 2016-09-20 19:35:03 +02:00
Eelco Dolstra
7a4209c356 Merge remote-tracking branch 'origin/master' into staging 2016-09-20 17:46:09 +02:00
Robin Gloster
0fa64b718f
gitlab module: enable postgres pg_trgm extension 2016-09-20 17:45:23 +02:00
Alexey Shmalko
60cfc558be Merge pull request #18718 from Mic92/powerdns 
powerdns: init at 4.0.1
 2016-09-20 11:07:51 +03:00
Alexey Shmalko
631c54c7a6 Merge pull request #18693 from Mic92/awesome 
awesome: fix LUA_PATH for luaModules
 2016-09-20 11:05:42 +03:00
Benjamin Saunders
0b4f8b93e6 matrix-synapse: 0.17.1 -> 0.18.0 2016-09-19 21:00:51 -07:00
Alexander Ried
e52418fd08 monetdb module: remove since it's not packaged 2016-09-19 23:11:13 +02:00
Bjørn Forsman
4fdc9fa7d9 nixos/autofs: fix typo afuese -> afuse 2016-09-19 13:49:47 +02:00
Jörg Thalheim
0a42f98eac
awesome: fix LUA_PATH for luaModules 
lua modules can be also within share/ within a package.
Previously only lib/ was included
 2016-09-18 19:18:03 +02:00
Jörg Thalheim
b0a1c0b343
powerdns: init at 4.0.1 
fixes #18703
 2016-09-18 14:52:44 +02:00
Moritz Ulrich
01e44ac1f9 emacs: 24.5 -> 25.1 
This commit removes all references to emacs24 with the exception of
emacs24-macports. The two folders in `pkgs/applications/editors` named
`emacs-24` and `emacs-24` are consolidated to a new `emacs` folder.

Various parts in nixpkgs also referenced `emacs24Packages` (pinned to
`emacs24`) explicitly where `emacsPackages` (non-pinned) is more
appropriate. These references get fixed by this commit too.
 2016-09-18 13:38:21 +02:00
Eric Sagnes
5cd565e507 mongodb service: switch configuration format to YAML 
Configuration format has changed from MongoDB 2.6 to
YAML and MongoDB 2.4 is EOL since March 2016.
 2016-09-18 09:29:35 +09:00
Thomas Tuegel
48999a953b Merge pull request #18656 from jokogr/u/sddm-0.14.0 
sddm: 0.13.0 -> 0.14.0
 2016-09-17 17:01:29 -05:00
Karn Kallio
2f91de22f5
enlightenment service: update gtk and gnome attributes 2016-09-17 12:32:51 +02:00
Joachim F
e06ead81bf Merge pull request #18630 from joachifm/unbound-improvements 
Unbound service improvements
 2016-09-17 10:56:42 +02:00
Vladimír Čunát
52e1a198cf Merge branch 'master' into staging 2016-09-17 00:31:34 +02:00
Eric Sagnes
2d2c311304 cadvisor test: fix (#18671) 
* influxdb module: add postStart

* cadvisor module: increase TimeoutStartSec

Under high load, the cadvisor module can take longer than the default 90
seconds to start. This change should hopefully fix the test on Hydra.
 2016-09-16 22:06:16 +02:00
aszlig
dc364e8b18
nixos/xfce: Fix reference to Gtk 2 
Regression introduced by bccd75094f.

The mentioned commit removed the pkgs.gtk attribute, but forgot to
change this within the xfce module.

Tested using the xfce NixOS test and it has passed on my machine.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-09-16 17:15:47 +02:00
obadz
29caa185a7 lightdm: obbey services.xserver.{window/desktop}Manager.default 2016-09-16 15:03:45 +01:00
obadz
a20c2ce4b8 xfce: install networkmanager applet when networkmanager is enabled 2016-09-16 15:03:41 +01:00
Robin Gloster
0201869418
prometheus.nodeExporter module: improve after feedback 
cc @teh @groxxda @fpletz
 2016-09-16 15:10:18 +02:00
Ioannis Koutras
d78e68b1a4 sddm: 0.13.0 -> 0.14.0 2016-09-16 15:09:18 +03:00
Joachim Fasting
22d6c97855
unbound service: extend isLocalAddress to handle ipv6 2016-09-16 09:47:36 +02:00
zimbatm
7a6b860e1c Merge pull request #18437 from Mic92/telegraf 
Telegraf
 2016-09-15 23:21:08 +01:00
Robin Gloster
55b8430f6f
Merge branch 'prometheus-node-exporter' of https://github.com/teh/nixpkgs into prometheus-nixos-exporter 2016-09-15 20:59:17 +02:00
Robin Gloster
e43a15720d
prometheus module: add nodeExporter submodule 2016-09-15 20:31:03 +02:00
Joachim Fasting
5dc60051fa
unbound service: some pre-chroot isolation 
While entering the chroot should provide the same amount of isolation,
the preStart script will run with full root privileges and so would
benefit from some isolation as well (in particular due to
unbound-anchor, which can perform network I/O).
 2016-09-15 15:37:20 +02:00
Joachim Fasting
39f5182a30
unbound service: use auto-generated uid 
1. The preStart script ensures consistent ownership, even if the unbound
   user's uid has changed
2. The unbound daemon does not generate data that needs to be private to
   it, so it would not matter that a different service would end up
   owning its data (as long as unbound remains enabled, it should reclaim
   ownership soon enough anyway).

Thus, there's no clear benefit to allocate a dedicated uid for the
unbound service.  This releases uid/gid 48.

Also, because the preStart script creates the data directory, there's no
need to specify a homedir or ask for its creation.
 2016-09-15 15:37:19 +02:00
Joachim Fasting
0759e77dfd
unbound service: add reference to man:unbound.conf(8) 2016-09-15 15:37:19 +02:00
Joachim Fasting
52432ee63d
unbound service: non-blocking random in chroot 
/dev/random is an exhaustible resource. Presumably, unbound will not be
used to generate long-term encryption keys and so allowing it to use
/dev/random only increases the risk of entropy exhaustion for no
benefit.
 2016-09-15 15:37:19 +02:00
Joachim Fasting
7980523e00
unbound service: convenient handling of local forward addresses 
do-not-query-localhost defaults to yes; with this patch, unbound is
configured to query localhost if any of the forward addresses are local.
 2016-09-15 15:37:19 +02:00
Joachim F
fbcb93852c Merge pull request #18047 from Nadrieril/ttrss 
tt-rss service: Use nginx virtualhosts; improve config options
 2016-09-15 13:37:20 +02:00
Joachim F
c571a7f221 Merge pull request #18500 from tvon/fix/gocd-server-options 
gocd-server: add startupOptions, empty extraOptions
 2016-09-15 13:24:48 +02:00
Théophane Hufschmitt
0401260922 selfoss service: init 2016-09-14 09:23:56 +02:00
Jörg Thalheim
8fddcad3f9
telegraf: init at 1.0.0 
Signed-off-by: Jörg Thalheim <joerg@higgsboson.tk>
 2016-09-14 07:19:55 +02:00
Vladimír Čunát
aa0fa19373 gtk2: move gtk-update-icon-cache to gtk2.out 
... to be useful for regeneration when building nixos environments.
Fixes #18536 (hopefully).
 2016-09-13 23:51:57 +02:00
Tom Hunger
0ded9a63a3 prometheus-node-exporter: Add module. 2016-09-13 11:28:45 +01:00
Alexander Ried
8524df1259 networking.nat: replace network-interfaces.target 
We can replace this safely with network-pre because iptables does not
care whether the interfaces exist or not.
 2016-09-13 11:19:22 +02:00
Alexander Ried
60430b140c lshd service: remove use of network-interfaces.target 2016-09-13 11:19:22 +02:00
Alexander Ried
d43b2b9c85 openvpn service: network-interfaces.target -> network.target 2016-09-13 11:19:22 +02:00
Alexander Ried
97416eaeef gpve service: network-interfaces.target -> network.target 2016-09-13 11:19:22 +02:00
Alexander Ried
4231293010 cluster.kubernetes: fix service ordering 
Requires does NOT imply After, so I added the missing ordering.
 2016-09-13 11:19:22 +02:00
Alexander Ried
5481831263 misc.etcd: get closer to upstream service definition 
taken from
https://github.com/coreos/etcd/blob/master/contrib/systemd/etcd.service

I intentionally kept "After = network.target" because I think it's
missing upstream (https://github.com/coreos/etcd/pull/6388)
 2016-09-13 11:19:22 +02:00
Alexander Ried
23ca90b013 monitoring.monit: get closer to upstream service definition 
taken from
e02247e048/system/startup/monit.service.in
 2016-09-13 11:19:22 +02:00
Alexander Ried
fbf0abf4af softether: improve service dependencies 2016-09-13 11:19:22 +02:00
Alexander Ried
9819cdc71a wicd: get closer to upstream service definition 
taken from
http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/view/head:/other/wicd.service
 2016-09-13 11:19:22 +02:00
Alexander Ried
3ada966bd5 treewide: minor format / style / documentation fixes 2016-09-13 11:19:22 +02:00
Alexander Ried
bc7710468d networking.dhcpcd: use upstream targets 2016-09-13 11:19:22 +02:00